TrustList daily digest · Tech and security
Friday, 16 October 2026
Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.
Tech and security6
1Security advisories
Chrome 155 update fixes ten security bugs, one rated critical
Version 155.0.8059.84/.85 patches a critical use-after-free in Prerender and six high-severity bugs, four of them in the V8 engine. Hong Kong's CERT warns of remote code execution.
2Security advisories
Nextcloud's built-in Collabora server flaw was exploited before disclosure
CVE-2026-110447 lets an attacker run commands on a Nextcloud server with no login while the built-in CODE server is down. A fix shipped on 11 September; the CVE followed on 14 October.
3Security advisories
Cisco Meraki hardening release covers seven flaw classes, top score 9.6
Every Meraki MX, MR, MS, MG and MV device and Campus Gateway is affected whatever its settings. Some fixed builds arrive only in late October or mid-November, and there are no workarounds.
4Security advisories
BeyondTrust Remote Support flaw exploited as a zero-day since August
CVE-2026-102764 scores 9.3 and affects Remote Support 26.2.3 and earlier. Mandiant traced exploitation to late August; versions before 24.3.1 get no patch and must be upgraded.
5Security advisories
Linux kernel flaw lets a guest VM read and crash its host
CVE-2026-99999, nicknamed PwnEscape, scores 9.3 and sits in the IPv4 checksum code every host kernel runs. Fixed stable kernels range from 5.10.272 to 7.2.11.
6Security advisories
Windows 11 October update can stop Smart App Control turning back on
KB5127648 for versions 24H2, 25H2 and 26H2 can grey out the switch once the feature is off. Microsoft gives a registry fix and two Group Policy packages until a permanent fix ships.
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.